CVE-2023-42096
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2023-42096 is a vulnerability in Foxit PDF Reader that allows remote attackers to execute arbitrary code on affected installations. This vulnerability arises from a flaw in the parsing of PDF files, where the lack of object validation before performing operations leads to code execution within the current process. To exploit this vulnerability, user interaction is required, such as visiting a malicious page or opening a malicious file. The affected products include various versions of Foxit PDF Reader. Organizations should apply the necessary patches or updates provided by Foxit Software to remediate this issue. If left unaddressed, this vulnerability poses a high risk to organizations, as it can allow attackers to take control of systems and potentially compromise sensitive information.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions